Headline
Ubuntu Security Notice USN-7045-1
Ubuntu Security Notice 7045-1 - Simone Margaritelli discovered that libppd incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
==========================================================================Ubuntu Security Notice USN-7045-1September 26, 2024libppd vulnerability==========================================================================A security issue affects these releases of Ubuntu and its derivatives:- Ubuntu 24.04 LTSSummary:libppd could be made to run programs if it received specially craftednetwork traffic.Software Description:- libppd: OpenPrinting libppdDetails:Simone Margaritelli discovered that libppd incorrectly sanitized IPP datawhen creating PPD files. A remote attacker could possibly use this issue tomanipulate PPD files and execute arbitrary code when a printer is used.Update instructions:The problem can be corrected by updating your system to the followingpackage versions:Ubuntu 24.04 LTS libppd-utils 2:2.0.0-0ubuntu4.1 libppd2 2:2.0.0-0ubuntu4.1In general, a standard system update will make all the necessary changes.References: https://ubuntu.com/security/notices/USN-7045-1 CVE-2024-47175Package Information: https://launchpad.net/ubuntu/+source/libppd/2:2.0.0-0ubuntu4.1Related news
Ubuntu Security Notice 7041-1 - Simone Margaritelli discovered that CUPS incorrectly sanitized IPP data when creating PPD files. A remote attacker could possibly use this issue to manipulate PPD files and execute arbitrary code when a printer is used.
A new set of security vulnerabilities has been disclosed in the OpenPrinting Common Unix Printing System (CUPS) on Linux systems that could permit remote command execution under certain conditions. "A remote unauthenticated attacker can silently replace existing printers' (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print